Peles_O

**Name of the Vulnerable Software and Affected Versions** Jumio SDK versions prior to 1.5.0 for Android **Description** The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This is done by improperly passing an attacker-controlled pointer to a native function. **Recommendations** For versions prior to 1.5.0, update to version 1.5.0 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** MetaIO SDK versions prior to 6.0.2.1 **Description** The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This is due to the class improperly passing an attacker-controlled pointer to a native function. **Recommendations** For versions prior to 6.0.2.1, update to version 6.0.2.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** ESRI ArcGis Runtime SDK versions prior to 10.2.6-2 for Android **Description** The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This is due to the improper passing of an attacker-controlled pointer to a native function. **Recommendations** For versions prior to 10.2.6-2, update to version 10.2.6-2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** PJSUA2 SDK versions prior to SVN Changeset 51322 for Android **Description** The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This method improperly passes an attacker-controlled pointer to a native function, potentially leading to code execution. **Recommendations** For versions prior to SVN Changeset 51322, update to a version that includes the fix for this issue to prevent potential code execution attacks.

**Name of the Vulnerable Software and Affected Versions** GraceNote GNSDK SDK versions prior to SVN Changeset 1.1.7 **Description** The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This method improperly passes an attacker-controlled pointer to a native function. **Recommendations** For versions prior to SVN Changeset 1.1.7, update to a version that includes the fix for this issue.

**Name of the Vulnerable Software and Affected Versions** MyScript SDK versions prior to 1.3 for Android **Description** The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This is due to the class improperly passing an attacker-controlled pointer to a native function. **Recommendations** For MyScript SDK versions prior to 1.3 for Android, update to version 1.3 or later to resolve the issue.